Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/CXoFElZwW4PWs_hTQ87v6bEKvR4.roa
File: CXoFElZwW4PWs_hTQ87v6bEKvR4.roa (raw, json)
Hash identifier: 1SVSIuQGG2HcuOnMn4jS+KIa5ua4QSXf9ENt7KvsOQk=
Subject key identifier: 09:7A:05:12:56:70:5B:83:D6:B3:F8:53:43:CE:EF:E9:B1:0A:BD:1E
Certificate issuer: /CN=ee31367df6d1861071c92bae726523326f45ba2a
Certificate serial: 019423D7297EAC3DDBE86312969AAFDD0F3F
Authority key identifier: EE:31:36:7D:F6:D1:86:10:71:C9:2B:AE:72:65:23:32:6F:45:BA:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/CXoFElZwW4PWs_hTQ87v6bEKvR4.roa
Signing time: Wed 01 Jan 2025 21:48:10 +0000
ROA not before: Wed 01 Jan 2025 21:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207200
IP address blocks: 2a0e:1cc0:8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.mft
rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 12:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:29:7e:ac:3d:db:e8:63:12:96:9a:af:dd:0f:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee31367df6d1861071c92bae726523326f45ba2a
Validity
Not Before: Jan 1 21:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=097a051256705b83d6b3f85343ceefe9b10abd1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:72:1c:3f:2f:a0:32:12:7f:b1:38:5e:32:04:
0d:33:a4:13:64:09:76:52:03:b8:1b:c1:6a:ce:80:
75:28:10:15:8e:6b:f7:8f:2c:9d:f3:38:97:1b:bb:
a2:41:75:b6:4d:23:9d:bd:da:cb:e2:b7:cc:8a:3b:
7f:b0:f5:11:d0:3d:73:47:5f:b5:a5:ff:7e:9a:e8:
5f:19:83:7c:95:c0:80:80:4c:9d:ae:53:74:89:81:
80:5d:7b:82:f0:0b:55:64:06:bc:81:5b:77:dd:eb:
35:b4:03:4b:7d:b8:04:a9:ae:d4:e5:59:90:e9:44:
b8:30:a8:6c:19:56:6f:72:e3:eb:9a:bb:82:04:df:
78:02:c5:b6:e2:a7:70:68:fc:53:4d:84:2f:14:d1:
25:ab:5e:ea:dc:8d:ab:a4:85:31:4c:4b:87:06:74:
85:f0:5a:e1:58:17:6a:05:8d:ae:4c:f4:bc:61:d3:
c2:6e:d7:86:16:1b:31:40:ad:47:46:11:3d:b3:1c:
84:43:d3:1a:05:8b:9a:f5:fb:b3:d3:de:66:5c:05:
54:0e:76:e0:31:24:1f:58:6a:88:02:2f:ff:38:b2:
60:ef:c0:fb:22:8c:22:d8:64:60:40:57:2e:96:6b:
97:92:29:40:19:bc:3c:2b:a4:7e:2f:df:93:67:2d:
85:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:7A:05:12:56:70:5B:83:D6:B3:F8:53:43:CE:EF:E9:B1:0A:BD:1E
X509v3 Authority Key Identifier:
keyid:EE:31:36:7D:F6:D1:86:10:71:C9:2B:AE:72:65:23:32:6F:45:BA:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/CXoFElZwW4PWs_hTQ87v6bEKvR4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:1cc0:8::/48
Signature Algorithm: sha256WithRSAEncryption
08:73:f1:1f:4f:04:09:f6:4f:84:f0:2a:16:e3:76:71:81:f7:
a0:46:7d:0c:0a:2f:e5:eb:70:a9:86:f5:6d:1d:03:94:33:39:
07:23:3b:02:bc:d8:e4:81:07:2b:66:fa:75:9d:78:1b:18:1b:
ea:60:c0:eb:89:bb:5d:40:8d:00:13:74:fd:37:6f:1f:3f:24:
b1:e3:60:79:67:00:5c:05:90:f6:3c:ae:10:5a:95:33:a6:8f:
19:19:c1:07:ad:48:23:80:cc:78:61:99:b5:de:08:48:8a:6c:
9f:c4:fc:71:17:58:50:85:b5:7e:46:8c:4b:66:db:cf:78:4f:
d7:e4:8a:eb:0f:c8:85:2d:aa:48:dd:d6:6d:53:21:16:7f:df:
b1:8b:af:7e:18:5c:62:33:8a:f5:7e:6d:87:63:43:61:7a:c2:
5d:c2:62:4c:e6:e0:bc:d2:ed:90:ce:0a:08:07:45:f0:c0:d1:
eb:84:96:58:e6:04:ef:86:11:33:f2:fa:c9:e5:bf:90:68:d9:
ac:c6:e6:e6:d2:b1:c1:df:c3:fc:b9:48:cd:f2:1f:bb:6c:7d:
aa:99:f0:74:0b:54:a2:fe:1a:2b:b5:72:ce:26:8f:0f:05:f1:
b7:d6:2b:48:99:be:af:33:05:2b:ac:34:46:ed:39:a1:64:4c:
b8:73:08:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:49:55 2025 by rpki-client